CVE-2017-6414

Name of the Vulnerable Software and Affected Versions libcacard versions prior to 2.5.3

Description The issue is related to a memory leak in the vcard apdu new function, located in the card 7816.c file of the libcacard library. This memory leak allows local guest OS users to cause a denial of service by consuming host memory. The denial of service is achieved through vectors related to allocating a new APDU object.

Recommendations For versions prior to 2.5.3, update to version 2.5.3 or later to resolve the issue. As a temporary workaround, consider restricting the allocation of new APDU objects to minimize the risk of exploitation.